CVE-2025-1388

Summary

CVE-2025-1388 represents a significant vulnerability in Orca HCM, a product by LEARNING DIGITAL. This issue permits attackers with standard access to upload arbitrary files, potentially introducing malicious code such as web shells. This could lead to unauthorized system access and data breaches, making it a serious concern for organizations using this software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.